[pve-devel] [PATCH] nexenta: volume_size_info: parse result to avoid tainted value

Alexandre DERUMIER aderumier at odiso.com
Mon May 27 11:41:53 CEST 2013


Sure, patch sent.


----- Mail original ----- 

De: "Dietmar Maurer" <dietmar at proxmox.com> 
À: "Alexandre Derumier" <aderumier at odiso.com>, pve-devel at pve.proxmox.com 
Envoyé: Lundi 27 Mai 2013 11:32:26 
Objet: RE: [pve-devel] [PATCH] nexenta: volume_size_info: parse result to avoid tainted value 

> - return nexenta_get_zvol_size($scfg, "$scfg->{pool}/$name"), 
> + my $ret = nexenta_get_zvol_size($scfg, "$scfg->{pool}/$name"); 
> + $ret =~ m/^(\d+)$/ or die "size is not valid"; 

Can we do those check inside nexenta_get_zvol_size()? 



More information about the pve-devel mailing list